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Sir; 



This is an Appeal Brief in connection with the decisions of the Examiner in a Final Office 
Action mailcd^Junc 6, 2008, and in connection with the Notice of Appeal filed September 4» 
2008. It is respectfully submitted that the present application has been more than twice rejected. 
Each of the topics required in an Appeal Brief and a Table of Contents arc presented herewith 
and labeled appropriately. 
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(1) Real Party in Interest 

The real party in interest is Hewlett-Packard Devdopment Company, L J, 



(2) Related Appeals and Interferences 

The Appellant is unaware of any appeals or interferences related to this case 

(3) Status of Claims 

Qaims 1-30 arc pending. Claims 1 8, 1 9, 24, 25 and 30 are withdrawn. Claims 1-17, 20- 
23, 26-29 are rejected, of which claims 1 , 20-22, and 26-29 arc independent Claims 1 -1 7» 20- 
23, 26-29 are all appealed* 

(4) Status of Amendments 

No amendment was filed subsequent to the Final Office Action dated June 6, 2008. 

(5) Summary of Claimed Subject Matter 

it should be understood that the subject matter of independent claims 1, 20-22, and 26-29 
IS supported in at least the ibllowing cited sections of the present application* Tlius, other 
sections in the present application may provide the same or additional supports as wclL 
Claim K A method for fadlitating content downloads via an insecure communications channel, 
comprising: 

3 
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recdving from a device via an insccorc communications channel at least one shared 
secret in encoded form that functions as an identifier of Qie device; See page 9, line 1 0-page 1 U 
line 21; Fig, 3, 

transmitting encrypted content via the insecure communications channel from a content 
server to the device; Sec page 9, line 1 0-page 1 1 , line 21 ; Fig* 3* 

receiving the shared secret in plaintext fbmi via a secure communications channel; See 
page 9, line 10-pagc 11;, line 21; Fig. 3. 

receiving a confirmation authorixing release of a decryption key; and Sec page 9, line 10- 
page 1 1 , line 21 ; Fig* 3. 

sending the decryption key for dccryptign of the enctypted content See page 9, line 1 0- 
pagc 1 1, line 21; Fig, 3. 

Claim 20. A method of authorizing a rdcasc of a decryption key corresponding to a downloaded 
content^ comprising: 

receiving from a user via a secure channel a shared secret in a plaintext form; See 
page 20, line 13-page 21, line 13; Fig, 6. 

sending the shared secret to a content server; Sec page 20, line 13**page 21 , line 1 3; 

Fig. 6- 

receiving a confirmation of successfial encrypted content download from the 
content server; Sec page 20, line 13-pagc 21, line 1 3; Fig. 6, 

after receiving the confirmation of successfiil encrypted content download from the 
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content server, promptizig fhc user to accept terms of download and dcciyption of the 
encrypted content; and See page 20, line 13-pagc 21, line 13; Fig, 6. 

after receipt of an indicia of such acceptance, sending on authorization to fbe 
content server to release a decryption key for decrypting the downloaded enciypted 
content See page 20» line 1 3^page 21 , line 13; Fig. 6. 

Claim 21. A system for transmitting a file to a device, comprising: 

a content server operative to store a plurality of content files, to wirdcssly transmit 
the content files via an insecure channel, and to communicate w^ih via a secure channel; See 
page 4, line 27-page 9, line 9; Figs. l-2» 

one or more remote devices operative to transmit and receive communiealions to 
and fit)m the content server over the insecure channel including anyone of the content files in 
encrypted form, each device including a processor to manage the communications as well as 
encryption and decryption of communicated data; Seepage 4» line 27*page 9, line 9; Figs. 1-2. 

a point of sale terminal opemtive to communicate with a user associated with any of 
the devices; and See page 4, line 27-page 9, line 9; Figs. 1-2, 

a payment server communicatively disposed between the point of sale terminal and 
the content server, and communicating therewith via the secure channel, further operative to 
provide a shared secret in plaintcjct form via the secured channel from the user to the content 
server, wherein the content server is further operative to release a decryption key to one of the 
devices upon receipt of confirmation fiom payment server that the user of the device accepted 

5 
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terms of download and decryption of a contcat file, wherein the deci;yption key is encrypted 
u^ng the shared secret Sec page 4, line 27-page 9, line 9; Figs. 1 -2* 

Claim 22. A computer readable program embodied on a tangible computer readable medium for 
facilitating content download Irom a content server to a device via an insecure communications 
channel, comprising: 

program code for causing a computer to receive a shared secret in an encoded form Irom 
a device, the encoded shared secret Hmchoning as a device identifier; Seepage 15, line 1 0-page 
20, line 12; Fig. 5. 

program code for causmg a computer to transmit content in an encrypted fonn &om a 
content server to the device; See page 1 5, line 1 0-page 20, line 12; Fig. 5. 

prognam code for causing a computer to receive the shared secret in plaintext form via a 
secure charmd; Sec page 15, line 1 0-page 20, line 1 2; Fig. 5. 

program code for causing a computer to receive a confirmation authorisdng the release 
of a decryption key for the transmitted encrypted file; and See page 1 5, line 1 0-pagc 20, line 12; 
Fig. 5. 

progmm code for causing a computer to send the decryption key for decrypting the 
transmitted encrypted file for which the payment confirmation has been received. See page 1 5, 
line 1 0-page 20, line 12; Fig. 5. 

Claim 26* A computer readable program embodied on a tangible computer readable medium for 
authori^dng a release of a decryption key corresponding to a downloaded content, comprising: 

6 
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code for receiving a shcircd secret in a plaintext form from a user, via a secure channel; 

Sec page 20, line 13-pagc 21^ line 13; Fig* 6* 
code for sending the shared secret to a content server. Sec page 20, line 13-page 21, line 

13; Fig* 6* 

code for receiving a confirmation of successiiil encrypted content download from the file 

server; See page 20, line 1 3-page 21, line 13; Fig. 6. 
code for prompting the user to purchase the downloaded encrypted content after receiving 

the confinnation of successful encrypted content download from the content server, 

and See page 20, line 1 3*pagc 21 , line 13; Fig. 6. 
code for, after receipt of payment, sending an authorization to the content server to 

rdcasc a decryption key operative to deci^pt the downloaded cDcryptcd file. Sec page 

20, line 13-page 21, line 13; Fig. 6. 

Claim 27. A method of &etUtating content download via an insecure communications channel, 
comprising: 

receiving a concealed identifier Irom a device wherein the concealed identifier identifies 

the device; Seepage 9, line ID-pagc 11, line 21; Fig, 3. 
transmitting an encrypted file to the device via an insecure diannel, wherein the 

encrypted file has a corresponding decryption key; Sec page 9, line 10-pagc 1 1, line 

21; Fig. 3. 

receiving the identifier in an unconcealed form over a secure channel; See page 9, line 10- 

7 
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page n, line 21; Fig. 3. 
receiving an authorization &om a payment server over the secure cbarmcl; See page 9, 

line 10«page 1 1, line 21; Fig. 3. 
encrypting the key using the idcnlificr; and Seepage 9» line 1 0-pagc 1 1, line 21; Fig, 3. 
transmitting fljc encrypted key to the device. See page 9, line 10-page 1 1, line 21 ; Fig. 3. 

Claim 28. A method for payment of file downloads to a wireless device, comprising: 

receiving a concealed identifier from a device, wherein the identifier corresfponds to the 
wireless device; Sec page 9, line 10-pagc 11, line 21; Fig. 3. 

transfening a selected encrypted file to the wireless device, wherein the selected file is 
encrypted using a key; See page 9» line 1 0-page 11, line 21; Fig. 3. 

receiving the identifier in an unconcealed form over a secure channel as part of a 
payment transaction; Sec page 9, line 10-page ] 1 » line 21 ; Fig. 3. 

using the identifier to encrypt the key; and Sec page 9, line 1 0-page 1 1 , line 21 ; Fig. 3. 

transmitting the encrypted key to the wireless device after receipt of payment. Sec page 
9, line 10-pagc U, liac21; Fig. 3. 

29. A system for transmitting content via an insecure communications cbanncl!i comprising: 
means for receiving a shared secret in an concealed form, from a device, wherein the 

shared secret identifies the device; Sec content server 6; page 9» line 10-page 11, line 21; Fig. 3. 
means for transferring a seleaed content in an eneiypted form to the device» wherein the 

8 
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selected file has a corrc^nding decryption key; See content server 6; page 9, line 10-page 1 1 » 
line 21; Fig. 3* 

means for iccdving the shared secret in an unconcealed form over a secure channel as 
part of a payment transaction; See content server 6; page 9, line 10-page 11, line 21; Fig. 3* 

means for using the shared secret to encrypt a decryption key; See content server 6; page 
9. line 10-pagc 11, line 21; Fig, 3, 

n^eans for transmitting the encrypted decryption key to the wireless device after receipt of 
payment See content server 6; page 9, line 10-page 1 1, line 21 ; Fig. 3. 

(6) Grounds of Rejection to be Reviewed on Appeal 

A. The specification is objected to as faiUng to provide proper antecedent basis for 
the clainicd subject matter, 

B. Claims 1 -1 7, 21-23, and 27-29 are rqcctcd under 35 US.C. §1 03(a) as being 
unpatentable over Wiser (6,385,596) in view of Parenty (2002/0064283). 

C. Claims 20 and 26 are rejected under 35 U.S.C* §103(a) as being unpatentable over 
Wiser (6.385^96) in view of Parenty (2002/0064283), and forther tn view of Katayama 
(2002/0027994), 
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(7) Arguments 

A. Thcobjcction tQ_thc_spccification_5;honld be reversed. 

The spedfication was objected to because the phrase **tang?ble computer readable 
medium** allegedly lacks antecedent basis in the specification. This phrase is recited tn claims 22 
and 26* 

^'Computer readable medium** was redted in originally filed claims 22 and 26, and thus 
clearly there is support and antecedent basis for this phrase. The *1angiblc" computer readable 
medium includes, for example, any tangle computer readable medium which is inherently 
provided in fbc PDA's described on pages 4 and 5 of the spedfication. In particular, page S, line 
24 rcdtcs the PDA includes a memoiy and processing capabilities. One of ordinary skill in the 
art would readily recogniif^e that a tangible computer readable medium in a PDA comprising 
programming code, as described in claim 22, includes any storage medium, such as the memory 
redted on page 5 of the spedfication. Accordingly, support is provided in the spedfication for 
^'tangible computer readable medium^** and the objection should be reversed* 

ft 

B- Thc rctcction of claims 1-1 7> 21-23. and 27-29 over Wiser in view of Parcntv under 

35 VS.C. 5103f a ) should be reversed. 

Tlie test for determining if a claim is rendered obvious by one or more references for 
purposes of a rejection under 35 US,C- § l03isset forthin^iS/?/wrer/iflffe/?a/ Co. v. Telejlex 
Inc., 550 U.S,^ 82 USPQ2d 1385 (2007): 

10 
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'Under § 1 03 , the scope and content of the prior art are to be determined; 
diffcrtmccs between the prior art and the claims at issue arc to be ascertained; and 
the level of ordinary skill in the pertinent art resolved Against this background 
the obviousness or nonobviousness of the subject matter is determined Such 
secondary considerations as commercial success, long felt but unsolved needs, 
failure of others, etc, might be utilised to give light to tlic circumstances 
surrounding the ori^ of the subject matter sought to be patented" Quoting 
Graham H John Deere Co. of Kansas City^ 383 U-S- 1 (1966)* 

According to the Bxamination Guidelines for Determining Obviousness Under 35 U.S-C 

103 in view ofKSR International Co. v. Teleflex Inc., Federal Renter, Vol. 72, No, 195, 57526, 

57529 (October 1 0, 2007). once the Graham factual inquiries arc resolved, there must be a 

dctennlnation of whether the claimed invention would have been obvious to one of ordinaiy sfctU 

in the art based on any one of die following proper rationales: 

(A) Combining prior art elements accorfing to known methods to yield 
predictable results; (B) Simple subistitution of one known element for another to 
obtain predictable results; (C) Use of known technique to improve similar devices 
(methods, or products) in the same way; (D) Applying a known technique to a 
known device (method, or product) ready for improvement to yield predictable 
results; (E) "Obvious to try" — choosing from a finite number of identified, 
. predictable solutions, with a reasonable expectation of success; (F) Known work 
in one field of endeavor may prompt variations of it for use in cither the same 
field or a different one based on design incentives or other market forces if the 
variations would have been predictable to one of ordinary skill in tlK art; (G) 
Some teaching, suggestion, or motivation in the prior art that would have led orie 
of ordinary skill to modify the prior art reference or to combine prior art reference 
teachings to airivc at the claimed invention* KSR International Co. v. Telejlex 
Ina, 550 U.S.., 82 USPQ2d 13SS (2007). . 

Furthermore, as set forth in KSR International Co. v. Telejlex Inc^ quoting fiom In re 
Kahn, 441 F. 3d 977, 988 (CA Fed 2006), ''[R] cpcctions on obviousness grounds cannot be 
sustained by mere conclusory statements; instead, there must be some articulated reasonings with 
some rational underpinning to support the ]tBfil conclusion of obviousness/* 
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Furtbermorc, as set forth ia MPEP 2143«03» to ascertain the diSercnccs between the prior 
art and the claims at issue, ^[a]ll claiia limitatious must be considered" because ^all words in a 
claim must be considered in judging the patentability of that claim against the prior art.'* In re 
Wilson, 424 F-2d 1382, 1385. 

Tf the above-identified criteria and rationales arc not met, then the cited references feil to 
reader obvious the claimed invention and« thus» the claimed invention is distinguishable over the 
dted references. 

Claim 1 recites, 

receiving from a device via an insecure communications channel at least 
one shared secret in encoded form that functions as an identifier of the device; ... 

receiving the shared secret in plaintext form via a secure communications 
channeh 

Wiser in view of Parenty fails to teach or suggest receiving a shared secret via an 
insecure channel. The rgcction alleges this feature is disclosed by Wiser, because Wiser 
discloses a client transmits a credit card number using SSL v3» However, SSL is a secure 
channel and not an insecure channcL Sec Applicants* background, fourth paragraph. Sec also 
paragraphs 33 and 36 of Parenty. 

The Hnal Office Action on page 3, paragraph S, asserts that this argument is not 
persuasive because SSL is a protocol and not a cbannel. However, the Examiner fails to 
recognize that use of SSL with any channel on Ihe Internet makes tiie channel secure, as 
described in the Applicants' background, and Parenty paragraphs 33 and 36. 
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Wiser in view of Parcaty fails to teach or suggest receiving a shared secret twice, but jn 
two forms, ic, an encodijd form and a plaintext form* According to the rejection, the shared 
secret is received once in encrypted form by Hie media licensing center in Wisen However, 
neither Wiser nor Parcnty singly or in combination teach or suggest a media licensing center 
receiving the credit card information twice, but in two diflfcrcnt forms- Furthermore, there would 
be no need for the media licensing center in "W^cr to receive the credit card infomiation twice, 
because once it is received, the transaction can be completed* 

Independent claim 21 recites, therein the decryption key is encrypted using the shared 
secret" The rejection alleges the credit card information of Wiser is the shared secret 
However, Wiser in view of Parenty fails to teach or suggest a decryption key is encrypted with 
credit card information. 

Independent claim 22 rcdtcs receiving a shared secret twice, but in two forms, Lc, an 
encoded form and a plaintext form, similar to claim 1 described above. For the reasons 
described above with respect to claim 1, Wiser in view of Parcnty fails to teach or suggest these 
features. 

Independent clahn 27 recites, 

receiving a concealed identifier firom a device wherein the concealed 
identifier identifies the device; * . . 

receiving the identifier in an unconcealed form over a secure channel; 
encrypting the key using the identifier. 

Wiser in view of Parcnty fails to teuch or suggest receiving an identifier twice, once in a 
concealed fbrm and once in an unconcealed form* Also, Wiser in view of Parenty Mh to teach 
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or suggest encrypting the key using the identifier. As described above, the rejection interprets 
the credit card information of Wiser as the claimed identifier. There is no disclosure in Wiser in 
view of Parcnty of cnctypdng a key using credit card information. 

Independent claims 28 and 29 rcdte features similar to the features of claim 27 described 
above. Accordingly, Wiser in view of Parcnty &ils to teach or suggest all tlie features of claims 
28 end 29. 

For at least these reasons, the rejection of claims 1-17, 21-23, and 27-29 over Wiser in 
view of Parenty should be reversed and these claims allowed 

The rcjccaQn of claiins 20 and 26 over Wiser in view of Parenty in further view of 
Katavama under 35 VS.C. SlOSfat should be reversed. 

Independent claim 20 recites, 

after recfcivintLthc confirmation of successful encrypted content download 
from_the_content server, prompting the user to accept terms of download and 
decryption of the encrypted content. 
Independent claim 26 recites similar features. 

The Final Office Action correctly admits Wiser in view of Parenty fails to teach or 
suggest that a content key is sent to a user after the encrypted content has been downloaded and 
in response to acceptance of terms. The Final Office Acdon, however, asserts Katayama, in 
paragraphs 64 and 78, discloses tliat a content key is sent to the user after the encrypted content 
is downloaded and in response to the purchase order for the content key. 

14 

PAGE 16m * RCVD AT 111412008 1:55:20 PM [Eastern SW^^^ 



N0V-0a-e008(TUE) M:06 MflNNfiVfl & KflNG (FflX)70386551 50 P. 017/031 



PATENT Atty Docket No.: 200309084-1 

App, Ser. No.: 10/679,092 

In paragraphs 47 and 48» Kutayama discloses that audio data is sent to the audio player 
1 1 1 from die distribution device via a network. In paragraph 61 ^ Katayama discloses that the 
audio data can be played in a degraded quality* Tn order to play the audio data in high quality, 
the audio player 1 1 1 needs a second key. The consumer can buy the second key after the initiQl 
receipt of the audio data in order to playback the audio in high quality. Sec Katayama, 
paragraphs 63 and 64. 

Wiser discloses in column 8, lines 19-32 that a media voucher* including indication of a 
purchase of a media data Sic, is provided prior to sending the media file to the media player 1 1 6 
of the user. Thus, Wiser discloses purchase is perfomicd prior to the downloading of the media 
file to the media player. It would not have been obvious to combine the purchase of the second 
key of Katayama with Wiser, because in Wiser, the media file is already purchased prior to 
sending the media file. Thus, there would be no reason to purchase the media file again in 
Wiser. Hence, it would not have been obvious to one of ordinary sldll in the art to combine 
Katayama with Wiser in view of Parenly, and the rejection of claims 20 and 26 should be 
reversed. 
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(8) Conclusion 

For at least the reasons given above, therejecdon of claims 1-17, 20-23, 26-29 described 
above and the objection to the Abstract descnbed above should be reversed and these claims 
allowed. 

Please grant any required extensions of time and charge any fees due in connection with 
this Appeal fincf to deposit account no. 08-202S. 



Respectfully submitted. 



Dated: November 4, 2008 




Registration No.: 45,301 



MANNAVA & RANG, P.C 
1 1240 Waplcs Mill Road 
Suite 300 

Fairfax, VA 22030 
(703) 652^3822 
(703)865-5150 (facsimile) 
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(9) Clikim Appendix 

1 * (Original) A method &r facilitatiDg content downloads via an insecure commumcatiotis 
channel, comprising: 

receiving from a device via an insecure communications channel at least one shared 
secret in encoded form that fbncdons as an identifier of the device; 

transmitting encrypted content via the insecure communications channel from a content 
server to the device; 

receiving the sliarcd secret in plaintext form via a secure cotmnunJcations channel; 
receiving a confirmation authorizing release ofa decryption key; and 
sending the decryption key for decryption of the encrypted content 

2. (Orifi?nal) A method as recited in claim 1 , wherein the confirmation is based on payment for 
the transmitted encrypted content 

3. (Original) A method as recited in claim 1 ♦ wherein the shared secret identifies a user, the 
device, or both* 

4. (Original) A method as recited in claim U wherein the shared secret is a credit card number 
oraphonenumbcr. 



17 



PAGE 19/31 ' RCVD AT 1 1I« 1 :55:20 PM [Eastern Stand^^^ 



N0V-0a-e008(TUE) U:06 MflNNflVR & KflNG 



(FflX)7038655150 



P. OEO/031 



PATENT Atty Docket No,: 2003090S4-1 

App. Scr. No.: 10/679,092 

5. (Original) A method as recited in claim 1, furtfaer comprising: 

receiving fiom the device an acknowledgement indicating receipt of the decryption 

key, 

6. (Original) A method as recited in claim 1 » wheran the decryption key is sent to tlie device 
via the insecure communication channeL 

?• (Original) A method as recited in claim 1» wherein ttie decryption key is sent in plaintext 
form to a point of sole terminal via the secure channeL 

8. (Original) A method as recited in claim 1 , fiirther comprising: 

receiving a random plaintext fiom the device. 

9. (Original) A method as recited in claim 8» wherdn the shared secret is encoded by a bash 
function of a combination of the shared secret and the random plaintext. 

10. (Oii^ol) A method as recited in claim 8, fiirthcr comprising: 

encrypting the decryption key before sending it to the device. 

1 1 . (Original) A method as recited in claim 1 0, wherein the decryption key is enoypted using at 
least the shared secret and, optionally, the random plaintext secret 
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12» (Original) A method us recited in claim 1 , further comprising: 

receiving from the device a content download confinBation value that is encoded with 
the shored secret 

13. (Original) A method as recited in claim 12, whertrfn the content download confirmation 
value is based on on MDS checksum. 

14. (Ori^nal) A method as recited in claim 12, wherein the content download confirmation 
value is based on a calculation using the shared secret 

15. (Original) A method as rcdtcd in claim 12» wherein the step of receiving confirmation 
ftirther comprises: 

receiving a random plaintext from the device; 

receiving a hash of the shared secret and the random plaintext for each shared secret; 
computing a hash of the shared secret with the random plaintext to produce a cyphcrlext 
for each shared secret; 

comparing the cyphertext to each of the received hash of each of the shared secrets; and 
in the case of a match, 

identil^nng the corresponding transmitted encoded content 

encoding a content download confirmation value for the transmitted encoded content 
using {he.shared secret; and 
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comparing the computed content download confirmation value to the received contcat 
download confinnatiorL value to verify a complete content download. 

1 6* (Original) A method as recited in claim 1 5, further comprising: 

after verification of the complete content download, causing a prompt to be sent to a user 

of the device to purchase the downloaded content; and 
receiving a confirmation of receipt of payment 

1 7. (Original) A method as recited in claim 1 , wherein content stored in the content server is 
encrypted prior to a start of a download process. 

18. (Withdrawn) A method for downloading content from a content server over an insecure 
commumcations channel, comprising: 

sending a shared secret in an encoded form to a content server via an insecure 

communications channel; 
downloading fiom the content server an encrypted content via the insecure channel; 
sending an encoded content download confirmation value to the content server via the 

insecure communicatLOns channel; 
receiving a decryption key in an encrypted form fi-om the content server via the insecure 

communications channel, wherein the decryption key is enciyptcd using the shared 

secret; 
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decrypting the downloaded decryption key using the shared secret; 
decrypting the downloaded encrypted content using the decryption key; and 
sending an acknowledgement of the received decryption key. 



19. (Withdrawn) The method of claim 1 8 ftirther comprising: 

providing an indicia of acceptance of terms of tfac download and decryption of the 
encrypted content by the user, wherein the indicia is an indication of acceptance of 
payment 

20. (Previously Presented) A method of authorizing a release of a decryption key corresponding 
to a downloaded content, comprismg: 

receiving from a user via a secure channel a shared secret in a plaintext form; 
sending the shared secret to a content servei^ 

receiving a confirmation of successful encrypted content download fiom the 
content server; 

after receiving the confirmation of successilU enciypted content download from the 
content server, prompting the user to accept terms of download and decryption of the 
encrypted content; and 

after receipt of an indicia of such acceptance, sending an authorization to the 
content server to rclca3c a decryption key for decrypting the downloaded encrypted 
content 
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21 • (Original) A system for transmitting a file to a device^ comprising: 

a GOntcnt server operative to store a plurality of content files, to wirclcssly tnu^smit 

fbc content files via an insecure channel, and to communicate with via a secure channel; 

one or more remote devices operative to transmit and recdvc communications to 

and fixtm the content server over the insecure channel including anyone of the content files in 

encrypted form, each device including a processor to manage the communications as well as 

enciyption and decryption of comniunicated data; 

a point of sale tenninal operative to communicate with a user associated with any of 

the devices; and 

a payment server communicatively disposed between the point of sale terminal and 
the content server, and communicating therewith via the secure channel, further operative to 
provide a shared secret in plaintext form via the secured channel from the user to the content 
server, wherein the content server is further operative to release a decryption key to one of the 
devices upon nscdpt of confinnation firom payment server that the user of the device accepted 
terms of download and decryption of a content file, wherein the decryption key is encrypted 
using the shared secret 

22. (Previously Presented) A computer readable program embodied on a tangible computer 
readable medium for facilitating content download firom a content server to a device via an 
insecure communications channel, comprising: 
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program code for causing a computer to receive a shared secret in an encoded Ibrm from 
a device, the encoded shared secret funcdoning as a device identifier; 

program code for causing a computer to transmit content in an encrypted form Irom a 
content server to the device; 

program code for causing a computer to receive the shared secret in plaintext tbrm >da a 
secure channd; 

program code for causing a computer to receive a confirmation authorizing the release 
of a decryption key for the transmitted encrypted file; and 

program code for causing a compxitcr to send the dccrypdon key for decrypting the 
transmitted enctypted Jile for which the payment confirmation has been received. 

23. (Original) The computer program embodied on a computer readable medium of claim 22 
wherein the confirmation is sent upon p^roent by a user of the device for the downloaded 
content. 

24. (Previously Presented) A computer readable program embodied on a tangle computer 
readable medium for downloading content from a content server, over an insecure 
communications channel, comprising: 

code for sending a shared secret in an encoded form to a content server 

code for receiving finom the content server an encrypted content; 

code for sending an encoded content download confinnation value to the content 
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server 

code for receiving an encrypted decryption key from the content server, wherein the 
decryption key is encrypted using the shared secret; 

code for decrypting the encrypted decryption key using the shared secret; 
code for decrypting the downloaded encrypted content using the decryption key; and 
code for sending an acknowledgement of (he received decryption key. 

25. C^thdrawn) The computer readable program crnbodicd on a coinputcr readable medium of 
claim 24 further comprising: 

code for providing an indicia of acceptance of terms of the download and decryption of 
the encrypted content by the user, wherein the indicia is an indication of acceptance of payment* 

26. (Previously Presented) A computer readable program embodied on a tangible computer 
readable medium for authorizing a release of a decryption key corresponding to a downloaded 
content, comprising; 

code for receiving a shared secret in a plaintext form from a user, via a secure channel; 
code for sending the shared secret to a content server, 

code for receiving a confiimation of successful encrypted content download from the file 
server, 

code for prompt'ng the user to purchase the downloaded encrypted content after receiving 
the confirmation of succcssfiil encrypted content download fi»m the content server; 
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and 



code for» after receipt of payment, sending on authorization to the content server to 
release a decryption key operative to decrypt the downloaded encrypted file. 

27. (Original) A method of facilitating content download via an insecure communications 
channel, comprising; 

receiving a concealed identifier from a device wherein the concealed identifier identifies 
the device; 

transmitting an encrypted file to the device via an insecure channel, wherein the 

encrypted fil e has a corresponding decryption key; 
receiving the identifier in an unconcealed form over a secure channel; 
receiving an authorlssation fi*om a payment server over the secure channel; 
encrypting the key ttsing the identifier; and 
transmitting the encrypted key to the device. 

28. (Original) A method for payment of file downloads to a wirdcss device, comprising: 

receiving a concealed identifier from a device, wherein the identifier corresponds to the 
wireless device; 

transferring a selected encrypted file to the wireless device, wherein the selected file is 
encrypted using a key; 

receiving the identifier in an unconcealed form over a secure channel as part of a 
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payment transaction; 

using the idcodficr to cncrypc fha key; and 

transmitting the encrypted key to the wireless device after receipt of payment 



29. (Original) A sfystem for transmitting content via an insecure commimications channel, 
comprising: 

means for receiving a shared secret in an concealed form, Irom a device, wherein the 
shared secret identifies the device 

means for transfenring a selected content in an encrypted form to the device, wherein the 
selected file has a corresponding decryption key; 

means ibr receiving the shared secret in an unconcealed fbim over a secure channd as 
part of a payment transaction; 

means for using the shared secret to encrypt a decryption key; 

means for transmitting the encrypted decryption key to the wireless device after receipt 
of payment 

30, CWithdrawn) An apparatus for content download to a device via an insecure channel 
comprising: 

means for receiving at least one identifier Ixom a device, wherein the identifier is 
concealed and identifies the device; 
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means &r traosinitting an caciyptcd £lc to the device; 

means for transmitting ailer receipt of an autbori2ation, a dcciyption key encrypted 
using the identifier, wherein the decryption key can decrypt the encrypted fi le. 
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(10) Evidence Appendix 
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(1 1) Rcbtted Procccdini^ Appendix 
None. 
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